CVE-2012-0096

CVE-2012-0096 is associated with Oracle Solaris. Connected documents indicate Solaris 10 SPARC and x86 require statd patches: 140387-02 (SPARC) and 140388-02 (x86). These patches are the remediation referenced in Nessus plugins, detailing a patch-based fix for the affected statd component. The ex...

CVE-2012-1692

CVE-2012-1692 concerns an unspecified vulnerability in Oracle Sun Solaris 10 that affects the SCTP component and can impact availability. The vulnerability is described as a local issue where local users can affect availability, with a CVSS-like impact indicating local attack vector, low complexi...

CVE-2012-3129

CVE-2012-3129 is linked to Solaris 10 (x86 and SPARC) via the Gnome PDF viewer component. The connected Nessus plugins describe the vulnerability as affecting Solaris 10 and indicate it can be exploited over the network by unauthenticated attackers, with potential impacts including unauthorized u...

CVE-2012-3178

CVE-2012-3178 corresponds to an unspecified local kernel vulnerability in Oracle Solaris 11. The connected sources show the issue resides in the Solaris kernel and can impact availability via unknown vectors (local access required). The notable remediation is via Oracle’s Jan 2013 CPU patches (e....

CVE-2014-4239

CVE-2014-4239 affects Oracle Solaris via the Common Agent Container (Cacao). Affected platforms include Solaris 8, 9, 10 and 11.1; the issue allows remote authenticated users to compromise confidentiality (partial impact) over a network with single authentication and low attack complexity. Connec...

CVE-2015-0428

CVE-2015-0428 affects Oracle Solaris 10 and 11. The vulnerability lies in the Solaris Resource Control component and is exploitable by a local attacker, with impact described as a complete availability disruption. The issue is addressed in Oracle’s January 2015 CPU with patches released for affec...

CVE-1999-1023

The CVE-1999-1023 entry concerns Solaris 7.0, where the useradd utility does not correctly interpret certain date formats provided to the -e expiration date argument. This incorrect parsing could allow users to log in after their accounts are supposed to expire, per the documented description. No...

CVE-1999-1197

CVE-1999-1197 affects SunOS 4.1.1 TIOCCONS. The issue is a missing or improper permission check when a user redirects console output/input, allowing a local user to gain privileges. No remediation or patch information is provided in the connected documents; exploitation details are not described.

CVE-1999-1297

Affected software : cmdtool in OpenWindows 3.0 and XView 3.0 running on SunOS 4.1.4 and earlier. Vulnerability : local attackers with physical access can cause the system to display unechoed characters (e.g., password prompts) via the L2/AGAIN key. Root cause / vector : the prompt characters can ...

CVE-1999-1371

Buffer overflow in /usr/bin/write on Solaris 2.6 and 7 allows local privilege escalation via a long string in the terminal name argument. Exploitation details are not provided in the connected documents; remediation/fixes are not specified here.

CVE-1999-1402

Technical details about CVE-1999-1402 are not publicly available in the provided documents; monitor for updates.

CVE-2001-0565

CVE-2001-0565 affects Solaris mailx (/usr/bin/mailx). A buffer overflow via a long -F option could let a local attacker gain privileges (mail group). Public sources confirm impact is local privilege escalation. Remediation: Solaris update 110957-02 is available (OpenVAS entries). CERT/US-CERT gui...

CVE-2001-1555

CVE-2001-1555 affects Solaris 8 via the pt_chmod path where logout does not call fdetach to reset terminal privileges, enabling local users to modify a TTY ACL and write to other users’ terminals. The available sources describe the vulnerable component and root cause but do not provide explicit p...

CVE-2003-1058

The CVE concerns the Xsun server on Sun Solaris (versions 2.6–9) when running in Direct Graphics Access (DGA) mode. A local user can trigger a denial-of-service (Xsun crash) or gain the ability to create/overwrite arbitrary files, probably via a symlink attack on temporary server files. Affected ...

CVE-2003-1076

CVE-2003-1076 affects Solaris 7–9 sendmail. The issue arises from how .forward files are processed, allowing a local user to cause a denial of service and potentially gain privileges through crafted constructs in a .forward file. The NVD entry specifies a local attack vector with high impact (com...

CVE-2003-1081

The CVE-2003-1081 vulnerability affects Solaris 8 in the Aspppls component, where a symlink attack on the temporary file named .asppp.fifo allows local users to overwrite arbitrary files. Root cause is a vulnerable handling/race condition around the .asppp.fifo in Aspppls, enabling a local attack...

CVE-2004-1348

Technical details are not publicly available in the provided documents for CVE-2004-1348. Monitor for updates in the CVE/NVD records.

CVE-2006-6495

CVE-2006-6495 describes a stack-based buffer overflow in ld.so.1 on Sun Solaris 8/9/10. An attacker can trigger arbitrary code execution via large precision padding values in a format string specifier passed to the doprf function, resulting in local code execution. The issue generally does not cr...

CVE-2010-4443

The CVE-2010-4443 entry relates to an unspecified local vulnerability in Oracle Solaris 10 and 11 Express, related to Kernel/NFS, affecting availability. Affected component: Solaris kernel/NFS path. Root cause details are not provided in the documents. Exploitation status and concrete mitigations...

CVE-2010-4446

Oracle Solaris 11 Express is listed as affected by CVE-2010-4446, with the vulnerability in the RDS and Kernel/InfiniBand subsystems that can allow local users to impact availability via unknown vectors. The CVE entry references an Oracle CPU advisory (CPU Jan-2011) that contains patches for mult...

CVE-2011-0829

Technical details about CVE-2011-0829 are not provided in the supplied documents; no affected products, versions, root cause, or fixes are disclosed. Monitor for updates.

CVE-2012-0563

CVE-2012-0563 is a Solaris vulnerability in the Kerberos/klist component affecting Solaris 9, 10 and 11. The Nessus plugins describe it as an easily exploitable local vulnerability that can allow a user with OS logon to cause a partial denial of service on Solaris. The root cause centers on the K...

CVE-2012-3112

CVE-2012-3112 concerns Oracle Sun Solaris 10, specifically a vulnerability in the Solaris Management Console component. The connected documents describe an unauthenticated network-based risk on Solaris 10, allowing potential modification of data via HTTP-like access. Affected platforms span Solar...

CVE-2012-3123

CVE-2012-3123 impacts Oracle Solaris 10 (x86 and SPARC) via the Solaris Apache HTTP Server component. The vulnerability allows unauthenticated, remote HTTP-based access that can lead to unauthorized read access to Solaris data. Affected patch levels are Solaris 10 update patches 120543-33, -34, -...

CVE-2012-3207

CVE-2012-3207 is a Solaris kernel vulnerability affecting Oracle SunOS/Solaris 9, 10, and 11. The connected documents specify an unspecified local-privilege/DoS-style issue in the Kernel that can allow a local attacker to affect availability (e.g., system hang or crash). Exploitation details are ...

CVE-2012-3215

CVE-2012-3215 affects Oracle Solaris on SPARC: a local vulnerability in the Kernel that can compromise confidentiality for local users. Description across sources states an unspecified vulnerability in Solaris 10/11 on SPARC with unknown vectors related to the Kernel. The NVD entry has details of...

CVE-2013-0411

CVE-2013-0411 concerns an unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 related to the RBAC Configuration. The connected records indicate the subcomponent involved is RBAC Configuration and describe impact to confidentiality, integrity, and availability via local access. Affected v...

CVE-2013-3797

CVE-2013-3797 is described as an unspecified local-privilege/availability issue in Oracle Solaris 11 affecting the Filesystem/DevFS component. The connected Nessus/NASL entry indicates this CVE is included in the July 2013 Oracle CPU SRU11_1_9_5_1 bundle along with CVEs 2013-3748 and 2013-3753, i...

CVE-2014-4277

Technical details (affected products, vulnerable components, root cause, impact, or mitigations) are not provided in the connected documents. Monitor for updates.

CVE-2014-6524

Technical details for CVE-2014-6524 are not publicly available in the provided documents. No affected components, root cause, or remediation are specified here. Monitor for updates.

CVE-1999-0296

Technical details (affected software versions, specific exploit steps, and precise impact scope) are not publicly available in the provided documents. Monitor for updates.

CVE-1999-0952

CVE-1999-0952 describes a buffer overflow in Solaris lpstat when using the class argument, enabling local users to gain root access. The description specifies the vulnerable component and impact but does not provide concrete exploit details, affected Solaris versions, or remediation in the suppli...

CVE-1999-1158

CVE-1999-1158 describes a buffer overflow in Solaris PAM (versions 2.5.1/2.5) and unix_scheme (Solaris 2.3/2.4) that lets local users gain root privileges through programs that use these modules (e.g., passwd, yppasswd, nispasswd). The root cause is a buffer overflow in the affected modules, enab...

CVE-2000-0316

CVE-2000-0316 is a local privilege escalation in Solaris 7 lp caused by a buffer overflow via a long -d option. Affected: SunOS/Solaris 7. Patch guidance from connected Nessus entries points to SunOS patch 106236-13 (Solaris 2.6 x86) and patch 107116-20 (Solaris 7 x86). Remediation: install the r...

CVE-2001-0124

CVE-2001-0124 describes a buffer overflow in the Solaris utility exrecover on Solaris 2.6 and earlier, potentially allowing a local user to gain privileges via a long command line argument. The connected documents do not specify a vendor patch/version or a remediation. The exploitation status is ...

CVE-2002-1296

CVE-2002-1296 affects Sun Solaris priocntl(2): an attacker with local privileges can exploit directory traversal in the pc_clname field of a pcinfo_t structure to cause priocntl to load a kernel module, achieving superuser code execution. The vulnerability stems from priocntl(2) not adequately va...

CVE-2002-2197

CVE-2002-2197 affects Sun Solaris 8.0. A local user can trigger a kernel panic by running a program that uses /dev/poll, causing a NULL pointer dereference in the kernel. The provided connected documents confirm the vulnerable component and the root cause (NULL pointer dereference via /dev/poll),...

CVE-2004-1351

The CVE-2004-1351 entry relates to Sun Solaris in.rwhod (the rwho daemon). A vulnerability exists in the in.rwhod component that can be exploited remotely to inject and execute arbitrary code, potentially compromising the host with root privileges. The accompanying advisory (CPAI-2004-207) explai...

CVE-2004-1356

Technical details about CVE-2004-1356 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official sources.

CVE-2005-1124

CVE-2005-1124 affects Solaris 7–9 where the libgss Generic Security Services Library is vulnerable. The issue allows local users to gain privileges by loading their own GSS-API, with partial impact to confidentiality, integrity, and availability (per CVSS). The exploitation status and concrete fi...

CVE-2006-0901

CVE-2006-0901 concerns an unspecified vulnerability in the Solaris hsfs filesystem affecting Solaris 8/9/10 that could cause a denial of service (panic) or allow arbitrary code execution. The connected documents indicate public patching activity for hsfs across affected Solaris releases: Solaris ...

CVE-2006-3606

CVE-2006-3606 concerns the Sun Solaris X Inter Client Exchange library (libICE) on Solaris 8 and 9. The description indicates an unspecified vulnerability that allows context-dependent attackers to cause a denial of service (application crash) in applications that use libICE. The NVD entry provid...

CVE-2006-3664

CVE-2006-3664 is an unspecified DoS vulnerability in the Solaris NIS (ypserv) service affecting Sun Solaris 8–10 (various SPARC/x86 platforms). The NVD notes a MEDIUM severity (base score 5.0) with network access and no authentication required, causing a ypserv hang via unknown vectors. Patches e...

CVE-2009-0838

The CVE-2009-0838 issue affects Sun Solaris 10 and OpenSolaris builds snv_88 through snv_102, where the crypto pseudo device driver fails to free memory. This can enable local attackers to trigger a denial-of-service (panic) via the vmem_hash_delete path. Public details in connected records confi...

CVE-2010-4442

Technical details for CVE-2010-4442 are not publicly provided in the supplied documents; no affected product/version or root cause is specified. Monitor for updates.

CVE-2011-2287

CVE-2011-2287 affects Oracle Solaris 8, 9, 10 and 11 Express via fingerd, allowing remote attackers to impact availability. Connected advisories/plugins confirm specific patches: Solaris 9 SPARC patch 147264-01; Solaris 10 x86 patch 146674-01; Solaris 10 SPARC patch 146673-01. Patches installable...

CVE-2011-3542

Oracle Solaris 10/11 Express has an unresolved, unspecified vulnerability in the Kernel/Performance Counter BackEnd Module (pcbe) that can impact availability for local users. The CVE-2011-3542 entry notes an unknown vector; Oracle’s October 2011 CPU advisory contains fixes for Solaris kernel com...

CVE-2012-1684

CVE-2012-1684 is a vulnerability in the Password Policy component of Oracle Sun Solaris (versions 8, 9, 10, 11). The connected Nessus/NASL details confirm that affected platforms include Solaris SPARC and x86, with the flaw described as easily exploitable and requiring at least logon to the OS pl...

CVE-2012-1691

Affected software : Oracle Solaris 11. Vulnerability and component : Kernel/Privileges. The connected Nessus entry associates CVE-2012-1691 with Solaris 11 and notes the vulnerability involves privilege escalation within the kernel/privileges area. Impact : Unauthorized OS takeover with arbitrary...

CVE-2012-3131

CVE-2012-3131 affects Oracle Solaris 9–11 (Network/NFS). The Nessus plugins describe a vulnerability in the Solaris Network/NFS component that enables unauthenticated, network-based attacks via NFS, potentially resulting in unauthorized read access to Solaris data. Affected versions cited are 9, ...